global ad remover using referrerpolicy

removes ads routed over the current domain (identified using referrerpolicy=unsafe-url)

您需要先安裝使用者腳本管理器擴展,如 TampermonkeyGreasemonkeyViolentmonkey 之後才能安裝該腳本。

You will need to install an extension such as Tampermonkey to install this script.

您需要先安裝使用者腳本管理器擴充功能,如 TampermonkeyViolentmonkey 後才能安裝該腳本。

您需要先安裝使用者腳本管理器擴充功能,如 TampermonkeyUserscripts 後才能安裝該腳本。

你需要先安裝一款使用者腳本管理器擴展,比如 Tampermonkey,才能安裝此腳本

您需要先安裝使用者腳本管理器擴充功能後才能安裝該腳本。

(我已經安裝了使用者腳本管理器,讓我安裝!)

你需要先安裝一款使用者樣式管理器擴展,比如 Stylus,才能安裝此樣式

你需要先安裝一款使用者樣式管理器擴展,比如 Stylus,才能安裝此樣式

你需要先安裝一款使用者樣式管理器擴展,比如 Stylus,才能安裝此樣式

你需要先安裝一款使用者樣式管理器擴展後才能安裝此樣式

你需要先安裝一款使用者樣式管理器擴展後才能安裝此樣式

你需要先安裝一款使用者樣式管理器擴展後才能安裝此樣式

(我已經安裝了使用者樣式管理器,讓我安裝!)

作者
cabtv
今日安裝
1
安裝總數
282
評價
0 0 0
版本
1.0
建立日期
2020-12-20
更新日期
2020-12-20
尺寸
758 位元組
授權條款
未知
腳本執行於
所有網站

Very basic global script that hides all elements in the form of [referrerpolicy="unsafe-url"].
It's a technique that is currently being widely deployed to stop domain based adblockers (such as adblockplus, ublockorigin and many many more) by routing the ad over the domain you're currently visiting. So ad.jpg won't come from https:/ad.net.work/ad.jpg but from https:/my.normal.site/ad.jpg.

The ad still comes from the ad-server, but is routed over the current domain. Because of that, browsers will trust that url (it's the same domain, so everything should be safe, right?) and submit the full referrer within the http-request to ad.jpg, including potential session or login parameters, etc. Because malicious all ads could will misuse that information, sites use the referrerpolicy-attribute and limit the referrer that is sent to the ad, thus limiting the security risk for the user.

Because there is absolutely no reason to do this for any other reason, it's a good way to identify ads. At least for a few years until the farts at the ad companies think about something new to disrupt our browsing.

If you want to use this in adblockplus, the filter is: ##[referrerpolicy="unsafe-url"]
Note that this only works on the initial page call, not on content that is loaded via ajax.


Be aware, this is a global script (will be loaded in every domain). So i advise everyone to disable automatic updates on this script. I take good care of my account, but i'm not prone to hacking or misuse. Never enable auto update on global scripts.